Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: +gDpKX/5T9RtmaCrl+sHqWTQhIm/bt0btSxjy3enadw=
Subject key identifier: 79:5B:E4:FB:08:A7:5E:FE:E2:B8:C1:CA:D3:28:32:D8:F2:9D:E3:F5
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 019D9BBE61790F83C60302B5B30685EB9D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:00:38 +0000
Manifest this update: Fri 17 Apr 2026 14:00:38 +0000
Manifest next update: Sat 18 Apr 2026 14:00:38 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: ASSLMReDv/QnFdT1TDUs0xJb8DxYfqg6kxLrRs9Mazw=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:61:79:0f:83:c6:03:02:b5:b3:06:85:eb:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Apr 17 14:00:38 2026 GMT
Not After : Apr 18 14:00:38 2026 GMT
Subject: CN=795be4fb08a75efee2b8c1cad32832d8f29de3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:18:76:00:a6:7c:31:5e:fd:4f:f4:0f:1d:
cb:7b:cb:12:c1:46:27:83:fa:c8:0a:ee:4c:4c:72:
06:e5:8b:01:ac:6e:18:bb:18:6f:0e:e0:95:a1:43:
2b:1b:47:6f:c0:82:34:cc:f4:47:d4:e3:55:9d:d4:
ab:65:d1:d3:7e:ad:50:96:a2:7f:69:66:40:2d:31:
42:57:13:2a:12:ef:92:7a:38:65:a0:be:09:e0:ef:
b1:f9:c7:fe:bb:58:1a:16:d2:fa:e0:c3:eb:d4:36:
2c:c9:c4:a8:18:d4:7a:de:aa:88:c6:cc:a9:a0:8a:
22:d4:bc:3b:30:e1:f8:d9:69:08:d8:69:78:16:14:
fd:5a:d0:18:f6:2c:86:cf:96:c7:f0:05:3b:92:4a:
98:d4:40:94:9b:42:dd:43:0a:de:85:16:40:15:05:
47:40:33:26:f7:48:cf:d1:dd:4a:5a:2a:29:89:64:
e3:ae:24:54:c7:78:1c:77:f4:e1:34:78:d1:ff:fb:
54:b5:79:de:5b:72:2e:ea:0a:7e:aa:72:d9:d0:1c:
a2:c1:0d:25:50:a8:fc:41:08:d5:b4:6a:67:a6:29:
ea:82:b1:38:b8:b5:3c:d5:07:57:b9:f6:13:b3:d3:
f4:18:ba:70:75:b2:a1:cc:0a:e7:4c:80:7a:8c:af:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:E4:FB:08:A7:5E:FE:E2:B8:C1:CA:D3:28:32:D8:F2:9D:E3:F5
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:99:6e:3b:b7:0b:c7:22:0c:bc:90:60:0b:b7:b5:e8:38:
c5:bf:c9:a4:4a:8c:78:51:94:68:7b:9b:df:c1:72:47:e7:c2:
bd:39:da:58:d1:7c:0a:bd:e6:1a:04:1b:5e:09:11:c5:88:27:
e9:b1:8e:4c:f9:31:8a:19:9f:c6:48:01:b7:b7:6a:dd:b8:48:
e9:48:ea:42:6b:e7:0c:d1:41:21:de:1d:aa:6a:02:53:87:64:
64:9b:16:39:71:f8:8b:5a:c4:97:38:07:cf:c8:eb:f1:0b:e9:
c0:18:73:4e:54:11:18:af:77:d3:b1:6d:aa:9c:9c:50:eb:34:
3a:89:0e:46:5e:d0:d9:35:34:f3:6c:fc:c9:cb:39:6b:d5:ac:
d1:c1:19:59:af:e5:e2:fe:0e:f4:ef:a8:74:21:12:d9:49:b3:
01:d3:2b:09:78:23:ac:68:02:ff:32:87:f3:68:9a:17:01:8e:
f5:af:b5:13:27:b6:f3:fc:6d:dc:a5:e7:5f:42:c2:18:ae:6d:
93:e1:f1:e1:19:94:64:33:02:70:d3:ce:cd:dd:85:6f:49:ce:
b7:83:e9:4c:df:6c:9b:8d:07:e6:11:8f:0f:6f:74:35:5b:65:
c3:55:1b:d7:b1:ce:57:e6:a5:07:04:6b:02:82:6e:1b:fc:72:
36:5f:2c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvmF5D4PGAwK1swaF651sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl
ZDFkNDYwHhcNMjYwNDE3MTQwMDM4WhcNMjYwNDE4MTQwMDM4WjAzMTEwLwYDVQQD
Eyg3OTViZTRmYjA4YTc1ZWZlZTJiOGMxY2FkMzI4MzJkOGYyOWRlM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxekYdgCmfDFe/U/0Dx3Le8sSwUYn
g/rICu5MTHIG5YsBrG4YuxhvDuCVoUMrG0dvwII0zPRH1ONVndSrZdHTfq1QlqJ/
aWZALTFCVxMqEu+SejhloL4J4O+x+cf+u1gaFtL64MPr1DYsycSoGNR63qqIxsyp
oIoi1Lw7MOH42WkI2Gl4FhT9WtAY9iyGz5bH8AU7kkqY1ECUm0LdQwrehRZAFQVH
QDMm90jP0d1KWiopiWTjriRUx3gcd/ThNHjR//tUtXneW3Iu6gp+qnLZ0ByiwQ0l
UKj8QQjVtGpnpinqgrE4uLU81QdXufYTs9P0GLpwdbKhzArnTIB6jK/NmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlb5PsIp17+4rjBytMoMtjyneP1MB8GA1UdIwQY
MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt
NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm
LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8WZbju3
C8ciDLyQYAu3teg4xb/JpEqMeFGUaHub38FyR+fCvTnaWNF8Cr3mGgQbXgkRxYgn
6bGOTPkxihmfxkgBt7dq3bhI6UjqQmvnDNFBId4dqmoCU4dkZJsWOXH4i1rElzgH
z8jr8QvpwBhzTlQRGK9307FtqpycUOs0OokORl7Q2TU082z8ycs5a9Ws0cEZWa/l
4v4O9O+odCES2UmzAdMrCXgjrGgC/zKH82iaFwGO9a+1Eye28/xt3KXnX0LCGK5t
k+Hx4RmUZDMCcNPOzd2Fb0nOt4PpTN9sm40H5hGPD290NVtlw1Ub17HOV+alBwRr
AoJuG/xyNl8sSA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:29 2026 by rpki-client